PT-2016-5752
CVE-2016-3924
·
تاريخ النشر
2016-10-10
·
تاريخ التحديث
2016-11-28
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions 4.x through 4.4.3
Android versions 5.0.x through 5.0.1
Android versions 5.1.x through 5.1.0
Android versions 6.x before 2016-10-01
Android versions 7.0 before 2016-10-01
Description
The issue allows attackers to obtain sensitive information via a crafted application due to the lack of validation of EFFECT CMD SET PARAM and EFFECT CMD SET PARAM DEFERRED commands in the mediaserver.
Recommendations
For Android versions 4.x through 4.4.3, update to version 4.4.4 or later.
For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later.
For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later.
For Android versions 6.x before 2016-10-01, apply the October 2016 security patch or later.
For Android versions 7.0 before 2016-10-01, apply the October 2016 security patch or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾